CVE-2025-39786
Severity CVSS v4.0:
Pending analysis
Type:
CWE-125
Out-of-bounds Read
Publication date:
11/09/2025
Last modified:
25/11/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iio: adc: ad7173: fix channels index for syscalib_mode<br />
<br />
Fix the index used to look up the channel when accessing the<br />
syscalib_mode attribute. The address field is a 0-based index (same<br />
as scan_index) that it used to access the channel in the<br />
ad7173_channels array throughout the driver. The channels field, on<br />
the other hand, may not match the address field depending on the<br />
channel configuration specified in the device tree and could result<br />
in an out-of-bounds access.
Impact
Base Score 3.x
7.10
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14 (including) | 6.16.4 (excluding) |
To consult the complete list of CPE names with products and versions, see this page